Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/NDhuGi2VyAvKEfn5PpMXVNf4X2o.roa
File: NDhuGi2VyAvKEfn5PpMXVNf4X2o.roa (raw, json)
Hash identifier: UI3BSQbX6Luh6HLaknP7S0gk4GcHwNdEtfByv2mLypA=
Subject key identifier: 34:38:6E:1A:2D:95:C8:0B:CA:11:F9:F9:3E:93:17:54:D7:F8:5F:6A
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0186BD44FDDBE1997A9D30089CE445B6F6B4
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/NDhuGi2VyAvKEfn5PpMXVNf4X2o.roa
Signing time: Tue 07 Mar 2023 18:11:00 +0000
ROA not before: Tue 07 Mar 2023 18:11:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 91.238.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 15:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:44:fd:db:e1:99:7a:9d:30:08:9c:e4:45:b6:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Mar 7 18:11:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34386e1a2d95c80bca11f9f93e931754d7f85f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2d:db:04:84:5c:c9:a2:24:d9:f9:85:39:63:
49:00:c9:05:27:ea:1c:bc:9b:f4:f1:ac:58:f7:c4:
bd:63:90:d2:26:21:bb:69:d4:d0:86:6e:77:ae:e3:
e5:bd:4c:4d:b1:65:35:c0:a8:a5:03:4f:35:80:06:
94:e8:95:4c:65:9c:ab:5f:a3:8d:73:a2:5d:52:a6:
c1:e6:9f:25:dd:ef:be:65:ad:7b:4a:f1:0d:1d:1b:
53:fe:26:05:92:2b:65:60:9a:9f:da:83:29:87:75:
63:2e:48:14:ee:c1:06:e1:76:69:df:d1:30:fe:10:
66:5c:ae:62:43:e2:c4:02:41:62:02:e8:57:4b:dc:
2b:47:87:fa:85:fc:04:0c:6c:b3:31:95:a9:97:19:
66:2d:fc:48:b9:c0:11:f1:95:11:34:56:be:22:2f:
79:90:f6:94:0b:18:66:2f:9d:ec:d3:f7:8f:00:88:
61:40:2b:3d:16:fc:2b:1b:b6:3f:3f:0b:16:ab:5d:
f2:17:8b:a3:52:7d:02:72:cc:07:95:ca:08:3f:75:
d8:66:b3:fc:2d:df:c2:6f:7f:b1:db:4b:62:c8:ac:
b0:bf:b0:44:c9:00:82:21:a4:4e:bd:98:67:73:c3:
76:2b:73:3c:d7:ea:7d:3b:5c:7e:c1:ee:62:f2:3c:
f0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:38:6E:1A:2D:95:C8:0B:CA:11:F9:F9:3E:93:17:54:D7:F8:5F:6A
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/NDhuGi2VyAvKEfn5PpMXVNf4X2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:15:24:d1:64:3b:c3:45:2b:90:29:28:01:99:84:d9:cd:6a:
cb:23:07:e4:ee:18:e8:e0:b8:31:35:10:a3:c1:da:c2:df:e6:
bd:fb:48:ff:11:f1:9d:5d:ba:e9:3f:f7:6d:98:3a:57:7c:5e:
6d:d0:9b:8c:33:cd:7b:4c:d0:6f:c6:c4:83:a8:39:70:e6:39:
26:c6:47:58:1e:c4:9b:e3:9e:e0:32:c4:84:2b:3e:f9:c0:98:
c6:72:00:a0:69:77:c3:21:ac:a2:b2:d0:f6:c5:14:4c:3e:c4:
df:47:c2:da:2d:1e:83:78:9b:3d:0d:78:09:69:94:9a:67:f7:
a2:a6:1e:7e:9d:1b:c9:07:71:ad:ba:c1:69:89:6d:e8:59:19:
aa:7f:cd:9d:b6:b4:a2:59:ce:20:08:90:0b:67:8d:f9:f9:2c:
bc:43:d8:12:3b:12:7a:33:ed:5b:81:03:12:d0:d0:22:5e:f1:
6e:14:b4:6d:dd:c2:a0:16:4c:57:4c:cc:de:db:ae:7f:57:31:
c2:3e:03:ce:b4:00:2a:2c:1d:93:c1:e6:d9:5e:74:ef:85:14:
ea:0a:ca:0f:64:06:dd:7b:f0:e8:58:c4:72:f5:17:b8:0d:b1:
3e:4b:bc:44:52:9a:e3:cf:bc:b7:48:c2:73:b8:74:28:56:08:
1e:14:8a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org